Agent skill

Fireflies Install Auth

by jeremylongshore in jeremylongshore/tons-of-skills-marketplace

Establish a least-privilege Fireflies API identity, protect its bearer key, and prove the authenticated GraphQL boundary without exposing meeting data.

MITAuto-check passedBackend & APIs

Install Fireflies Install Auth

skills CLI
$ npx skills add jeremylongshore/tons-of-skills-marketplace --skill fireflies-install-auth -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install jeremylongshore/tons-of-skills-marketplace fireflies-install-auth --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/jeremylongshore/tons-of-skills-marketplace.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/.curated/fireflies-install-auth .claude/skills/fireflies-install-auth && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
fireflies-install-auth
GitHub stars
2.8k
Token cost
~1.1k tokens
SKILL.md length
513 words
Files
2 (incl. references)
Skills in repo
3,342
Repo updated
First seen
Licence
MIT

At a glance

Establish a least-privilege Fireflies API identity, protect its bearer key, and prove the authenticated GraphQL boundary without exposing meeting data.

  • Works in 7 steps: Identify the owning Fireflies user or… → Create or retrieve the API key through… → Store the key in the approved secret… → …
  • Repairing an integration
  • SKILL.md covers Overview, Prerequisites, Current Contract and Authentication, plus 8 more sections
  • Reaches api.fireflies.ai; needs FIREFLIES_API_KEY and REDACTED_KEY

What it does

Fireflies Install Auth is an agent skill from jeremylongshore/tons-of-skills-marketplace. Establish a least-privilege Fireflies API identity, protect its bearer key, and prove the authenticated GraphQL boundary without exposing meeting data. Use when bootstrapping or repairing an integration. Trigger with "configure Fireflies API", "Fireflies auth failed", or "rotate Fireflies key".

Its SKILL.md is about 1.1k tokens, which your agent loads only when the skill is triggered. The skill folder holds 2 other files, including reference files (for example `references/official-docs.md`). Compatibility notes: Designed for Claude Code; live Fireflies work requires network access

It sits in Backend & APIs, covering GraphQL. It works with GraphQL. The repository describes itself as: Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com. The licence is MIT.

When your agent uses it

  • Repairing an integration
  • With configure Fireflies API
  • Fireflies auth failed
  • Rotate Fireflies key

Example prompts

  • “configure Fireflies API”
  • “Fireflies auth failed”
  • “rotate Fireflies key”
  • “/fireflies-install-auth”

Requirements

  • A credential in FIREFLIES_API_KEY
  • A credential in REDACTED_KEY
  • Compatibility (from SKILL.md): Designed for Claude Code; live Fireflies work requires network access
  • Pre-approved tools (allowed-tools): Read, Glob, Grep, Write, Edit

Workflow steps

7 steps, taken from the first numbered list in SKILL.md.

  1. Identify the owning Fireflies user or team, intended environment, and exact read or mutation capabilities.
  2. Create or retrieve the API key through the Fireflies dashboard; never ask a user to paste it into chat.
  3. Store the key in the approved secret manager and inject it as FIREFLIES_API_KEY only at runtime.
  4. Send a minimal user query from a controlled server-side client and inspect both HTTP status and the GraphQL errors array.
  5. Record the authenticated user ID, team context, key owner, storage location, and rotation owner without recording the key.
  6. Test an invalid-key path and confirm logs redact Authorization and response data.
  7. Document rotation and revocation steps before enabling production access.

What it can do on your machine

Read from SKILL.md and the folder at commit cfae287. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves these tools, so the agent can use them without asking each time:

    • Read
    • Glob
    • Grep
    • Write
    • Edit

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    Hosts in commands or code, which the agent is likely to contact:

    • api.fireflies.ai

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names these keys or tokens, usually read from environment variables:

    • FIREFLIES_API_KEY
    • REDACTED_KEY

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

  • Compatibility

    Designed for Claude Code; live Fireflies work requires network access

    From compatibility in the SKILL.md frontmatter.

Context cost

Fireflies Install Auth loads about 1.1k tokens when it runs, and up to ~1.5k if it reads all its reference files. Until then it costs about 80 tokens; SKILL.md has 513 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~80
When it runs · the whole SKILL.md, loaded when a task matches
~1.1k
With references · SKILL.md plus every file in references/, read only if the agent opens them
~1.5k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from jeremylongshore/tons-of-skills-marketplace at commit cfae287, republished under its MIT licence (© jeremylongshore). 513 words, ~1,106 tokens.

Download SKILL.mdSave it as .claude/skills/fireflies-install-auth/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.
name
fireflies-install-auth
description
Establish a least-privilege Fireflies API identity, protect its bearer key, and prove the authenticated GraphQL boundary without exposing meeting data. Use when bootstrapping or repairing an integration. Trigger with "configure Fireflies API", "Fireflies auth failed", or "rotate Fireflies key".
allowed-tools
Read, Glob, Grep, Write, Edit
compatibility
Designed for Claude Code; live Fireflies work requires network access
argument-hint
<repository-path> <environment>
version
1.12.0
license
MIT
author
Jeremy Longshore <jeremy@intentsolutions.io>
tags
saas, fireflies, authentication, security
model
inherit
effort
medium

Fireflies API Identity and Access Setup

Overview

Create an auditable identity boundary before any transcript query or mutation. A successful request proves only that the key is accepted; it does not grant permission to enumerate or export meeting content.

Prerequisites

  • The target repository or integration path and the requested operator outcome.
  • The Fireflies principal, team, environment, and data classification for the work.
  • Current Fireflies documentation, credentials only when needed, and an accountable approver.

Current Contract

Fireflies uses POST requests to https://api.fireflies.ai/graphql with Content-Type application/json and Authorization: Bearer <API key>. Obtain the key from the Fireflies Integrations page, keep it server-side, and use the smallest identity query needed to confirm the principal and team context.

Authentication

For authenticated operations, inject FIREFLIES_API_KEY from an approved secret manager and send it only as Authorization: Bearer REDACTED_KEY to https://api.fireflies.ai/graphql. Never print, commit, place in a URL, forward to a browser, or include the key in evidence. Webhook signing secrets are separate credentials and must not be reused as API keys.

Instructions

  1. Identify the owning Fireflies user or team, intended environment, and exact read or mutation capabilities.
  2. Create or retrieve the API key through the Fireflies dashboard; never ask a user to paste it into chat.
  3. Store the key in the approved secret manager and inject it as FIREFLIES_API_KEY only at runtime.
  4. Send a minimal user query from a controlled server-side client and inspect both HTTP status and the GraphQL errors array.
  5. Record the authenticated user ID, team context, key owner, storage location, and rotation owner without recording the key.
  6. Test an invalid-key path and confirm logs redact Authorization and response data.
  7. Document rotation and revocation steps before enabling production access.
Show full SKILL.md (230 more words)Show less

Tool Discipline

Use Read, Glob, and Grep to inspect code, configuration, tests, and evidence. Use Write/Edit only for approved implementation or documentation changes. Do not query Fireflies, retrieve meeting content, create an AskFred thread, upload media, change account state, replay an event, or deploy merely because this skill was invoked.

Approval Boundaries

Require approval before creating, rotating, revoking, or broadening a production key, changing its owning account, or querying any real meeting record.

Output

Return the exact operation or event surface, environment, authorization class, selected field groups, validation results, content-free metrics, decisions, and a concise pass/fail receipt. Keep secrets and meeting-derived content out of general output.

Validation

Before reporting success, rerun the smallest relevant deterministic check, compare actual state with the requested outcome and current contract, verify no secret or meeting-derived content entered logs or artifacts, and record unresolved uncertainty explicitly.

Error Handling

  • auth_failed: verify the Bearer scheme, secret injection, and key lifecycle without printing the token.
  • HTTP success with GraphQL errors: treat the operation as failed and record safe error metadata.
  • Unexpected team visibility: stop and review the key owner's role before continuing.

Examples

  • "Prove staging auth" returns only the principal and a redacted request receipt.
  • "Use this key in browser code" is rejected because bearer keys must remain server-side.

Resources

Read official Fireflies.ai evidence before relying on a field, filter, event, permission, plan limit, mutation, or processing state.

© jeremylongshore, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 1 other file (references) in skills/.curated/fireflies-install-auth of jeremylongshore/tons-of-skills-marketplace.

  • SKILL.md
  • references/official-docs.md

Open the folder on GitHubat commit cfae287

Compare with similar skills

Fireflies Install Auth next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Fireflies Install Auth compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Fireflies Install Auth this skilljeremylongshore/tons-of-skills-marketplace2.8k—~1.1kAutomated safety check: PassMIT
Nodejs Backend Patternsever-works/ever-works16218 repos~4kAutomated safety check: PassAGPL-3.0
API DesignerJeffallan/claude-skills12k1 repos~2kAutomated safety check: PassMIT
GraphQL Operations with CodegenChrisWiles/claude-code-showcase6.1k3 repos~1.5kAutomated safety check: PassNone
API Design Principlesjh941213/my-cc-harness12518 repos~3.4kAutomated safety check: PassNone
API And Interface Designdzhalaevd/Donatello1358 repos~2.6kAutomated safety check: PassApache-2.0

Similar skills

  • Nodejs Backend Patterns

    ever-works/ever-works

    Build production-ready Node.js backend services with Express/Fastify, implementing middleware patterns, error handling, authentication, database integration, and API design best practices.

    162 GitHub starsUsed in 18 repos~4k tokens
    Backend & APIsAuto-check passed
  • API Designer

    Jeffallan/claude-skills

    Designs REST and GraphQL APIs from resource modeling to an OpenAPI 3.1 contract, with versioning, pagination and RFC 7807 error handling.

    12k GitHub starsUsed in 1 repo~2k tokens
    Backend & APIsAuto-check passed
  • GraphQL Operations with Codegen

    ChrisWiles/claude-code-showcase

    Sets the rules for writing GraphQL queries and mutations in .gql files, running codegen, and using generated Apollo hooks with proper error and loading handling.

    6.1k GitHub starsUsed in 3 repos~1.5k tokens
    Backend & APIsAuto-check passed
  • API Design Principles

    jh941213/my-cc-harness

    REST 및 GraphQL API 설계 원칙 가이드. An agent skill from jh941213/my-cc-harness.

    125 GitHub starsUsed in 18 repos~3.4k tokens
    Backend & APIsAuto-check passed
  • API And Interface Design

    dzhalaevd/Donatello

    Guides stable API and interface design. An agent skill from dzhalaevd/Donatello.

    135 GitHub starsUsed in 8 repos~2.6k tokens
    Backend & APIsAuto-check passed
  • Registers a new syncable entity in three NestJS modules and adds its service and GraphQL resolver layers when contributing to the Twenty server.

    58k GitHub stars~2.9k tokensUpdated today
    Backend & APIsAuto-check passed

More from jeremylongshore/tons-of-skills-marketplace

All 3,342 skills in this repo
  • Performing Security Code Review

    jeremylongshore/tons-of-skills-marketplace

    Execute this skill enables AI assistant to conduct a security-focused code review using the security-agent plugin.

    2.8k GitHub starsUsed in 2 repos~1.3k tokens
    Auto-check: notes
  • Adapting Transfer Learning Models

    jeremylongshore/tons-of-skills-marketplace

    Build this skill automates the adaptation of pre-trained machine learning models using transfer learning techniques.

    2.8k GitHub stars~1.1k tokensUpdated today
    Auto-check passed
  • Agent Context Loader

    jeremylongshore/tons-of-skills-marketplace

    Execute proactive auto-loading: automatically detects and loads agents.md files.

    2.8k GitHub stars~1.1k tokensUpdated today
    Auto-check passed
  • Aggregating Performance Metrics

    jeremylongshore/tons-of-skills-marketplace

    Aggregate and centralize performance metrics from applications, systems, databases, caches, and services.

    2.8k GitHub stars~1.2k tokensUpdated today
    Auto-check passed
  • Analyzing Capacity Planning

    jeremylongshore/tons-of-skills-marketplace

    Execute this skill enables AI assistant to analyze capacity requirements and plan for future growth.

    2.8k GitHub stars~947 tokensUpdated today
    Auto-check passed
  • Analyzing Database Indexes

    jeremylongshore/tons-of-skills-marketplace

    Process use when you need to work with database indexing. An agent skill from jeremylongshore/tons-of-skills-marketplace.

    2.8k GitHub stars~2k tokensUpdated today
    Auto-check passed

Works with

Categories

Questions about Fireflies Install Auth

What does Fireflies Install Auth do?

Establish a least-privilege Fireflies API identity, protect its bearer key, and prove the authenticated GraphQL boundary without exposing meeting data. Fireflies Install Auth is an agent skill from jeremylongshore/tons-of-skills-marketplace. Establish a least-privilege Fireflies API identity, protect its bearer key, and prove the authenticated GraphQL boundary without exposing meeting data.

When should I use Fireflies Install Auth?

Fireflies Install Auth fits situations like: repairing an integration; with configure Fireflies API; fireflies auth failed; rotate Fireflies key.

How do I install Fireflies Install Auth in Claude Code?

Run `npx skills add jeremylongshore/tons-of-skills-marketplace --skill fireflies-install-auth -a claude-code`. Or copy the skill folder (skills/.curated/fireflies-install-auth in jeremylongshore/tons-of-skills-marketplace) into .claude/skills/fireflies-install-auth in your project. Claude Code loads it when a task matches its description.

How do I install Fireflies Install Auth in Codex?

Run `npx skills add jeremylongshore/tons-of-skills-marketplace --skill fireflies-install-auth -a codex`. Or copy the skill folder (skills/.curated/fireflies-install-auth in jeremylongshore/tons-of-skills-marketplace) into .agents/skills/fireflies-install-auth in your project. Codex loads it when a task matches its description.

Can I use Fireflies Install Auth in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add jeremylongshore/tons-of-skills-marketplace --skill fireflies-install-auth -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/fireflies-install-auth, .gemini/skills/fireflies-install-auth, .github/skills/fireflies-install-auth and .opencode/skills/fireflies-install-auth in your project.

What does Fireflies Install Auth need to run?

Going by SKILL.md and its folder, Fireflies Install Auth needs credentials named FIREFLIES_API_KEY and REDACTED_KEY. Our summary lists: A credential in FIREFLIES_API_KEY; A credential in REDACTED_KEY. Its frontmatter pre-approves these tools: Read, Glob, Grep, Write, Edit. Compatibility (from SKILL.md): Designed for Claude Code; live Fireflies work requires network access.

Does Fireflies Install Auth access the network?

SKILL.md names 1 domain. In commands or code: api.fireflies.ai; the agent is likely to contact it when it follows the instructions. This is read from the text; nothing was executed.

Is Fireflies Install Auth safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Fireflies Install Auth use?

Fireflies Install Auth is published under the MIT licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Fireflies Install Auth use?

About 1.1k tokens (SKILL.md is roughly 4.4k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 431 tokens, read only when the agent opens those files.

What are the alternatives to Fireflies Install Auth?

Skills that share tags, products or a category with Fireflies Install Auth: Nodejs Backend Patterns (ever-works/ever-works, 162 stars), API Designer (Jeffallan/claude-skills, 12k stars), GraphQL Operations with Codegen (ChrisWiles/claude-code-showcase, 6.1k stars) and API Design Principles (jh941213/my-cc-harness, 125 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Fireflies Install Auth?

jeremylongshore (a GitHub user) maintains it in jeremylongshore/tons-of-skills-marketplace, which has 2,827 GitHub stars. The repository holds 3,342 skills in this directory. The repository was last updated on October 10, 2026.

Source: jeremylongshore/tons-of-skills-marketplace on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.